Privacy Policy

Effective 26 October 2026

Who we are

Greens + Beans Grocery Co-operative is a buying co-op in Logan Circle, Washington, DC. This policy covers our website, greensnbeans.org, which includes the front page, the Guide, and the member shop and organizers’ dashboard (together, the app). The co-op’s organizers run the site.

Information we collect

• We keep your name and email address, which an organizer enters when they add you as a member.
• There are no passwords. When you sign in, we email you a six-digit code. A code stops working after 10 minutes or as soon as it is used, and we store only a scrambled form of it, not the code itself.
• For each store you shop at, we keep the markup you pay on top of what the co-op paid, whether you help run that store, and your monthly dues.
• For every order and sale, we keep the items, quantities, prices, total and date, whether it has been paid, and Stripe’s reference number for the payment.
• We record which months of dues you paid, how much you paid and when. If an organizer waives a month, we record the waiver, the reason and the organizer who gave it.
• If you suggest a product, we keep the product, your reason if you gave one, and your name. We also record when you mark a suggestion as Interested. Other members see the product and how many people are interested, but not your name or your reason. Organizers see both.
• Organizers can write notes about a member, such as what they were told about their dues. Only organizers can read them.
• When you press Tell the organizers or the ? button, we email your message to the organizers along with the page you were on, your name and email address, the time, and the browser and device details your browser reports. The app does not store the report.
• When an organizer changes something in the dashboard, such as a price, a member’s details or a markup, the app writes an entry in an activity log saying who made the change, what changed and what it was before. Changes to your name, email address, markup and dues appear in that log. Stock records carry the email address of the organizer who entered them. Organizer sign-ins are recorded; member sign-ins are not. An admin can open the app as you to help with a problem, and that is recorded with the admin’s name.
• The app also holds an older roster of co-op members, kept for dues and task sign-ups. An entry can include a name, an email address and a phone number.

We do not collect your card number. You enter it in a form provided by Stripe, or pay with Apple Pay or Google Pay, and it goes directly to Stripe. The app has no place to store card details. It receives only a reference number, the amount and the time of the payment.

How we use it

We use your email address to sign you in, and your markup to price every order you place. We use the details of each order to fill it and to show you your order history, and we look at what members buy and suggest to decide what the co-op should stock. Dues records show what each member has paid or owes. Organizers read your reports so they can answer them, and the activity log keeps a record of who changed what.

We do not sell or rent personal information.

Who handles it for us

We use the following services to run the site. Each handles part of your information under its own privacy policy.

• Neon hosts the database where the information above is stored.
• Vercel hosts the site and runs the app. It also serves the product photos and the film on the front page, and provides the site’s analytics. Like any web host, it receives each request your browser makes, including your IP address.
• Stripe processes card payments for orders and dues. It receives your payment details and the amount. We send it the amount and an order or dues number, and for dues the store and the months being paid. We do not send it your name or email address.
• Resend delivers our email: sign-in codes, reports to the organizers, and purchase orders to suppliers. Those messages pass through Resend, including your email address when we send you a code, and your name and email address when you send a report.
• MailerLite runs the interest form on the front page. The form is separate from the app, and what you enter in it goes to MailerLite and to the co-op.

Organizers email purchase orders to suppliers. A purchase order lists products and quantities, and nothing in it comes from a member’s record. Suppliers’ replies go to the organizers.

Cookies, storage and analytics

We set one cookie, and only when you sign in. It is called customerToken and it keeps you signed in. It holds your member number and email address in a signed token, so it cannot be forged or altered. Scripts on the page cannot read it, and on the live site it is sent only over HTTPS. It lasts three days, or up to 30 days if you sign in from the shop’s icon on your home screen and are not an organizer. Signing out removes it.

The site also keeps a few items in your browser’s own storage: what is in your cart (product numbers and quantities, without prices), the store you chose last, and whether you closed the dues reminder during your current visit. These stay on your device, and clearing your site data removes them.

The app sets no other cookies. Stripe’s script loads on the checkout page and when you open the card form for dues. On those pages, Stripe may set its own cookies and read signals from your device to detect fraud.

The site shows no ads. On every page, it uses two Vercel tools to count visits and to measure how quickly pages load.

• Vercel Web Analytics counts visits. With each page view it may store the time, the page address and its route pattern, the page that referred you, and the part of the address after a question mark, which Vercel filters. It may also store your approximate location (country, region and city), your operating system and browser and their versions, and your device type (mobile, desktop or tablet). It records no names or email addresses, and it uses no third-party cookies. Instead, it recognizes a visit by a hash made from the request, and discards the visit session after 24 hours.
• Vercel Speed Insights records how quickly a page loaded for you: the page address, your connection speed, browser, device type, operating system and country, and the timings. According to Vercel, this data is anonymous and cannot be used to follow a visit across pages or to identify you.

How long we keep it

Purchases are kept permanently, and a sale is never deleted. If a sale was entered by mistake, an organizer voids it: it is marked void and stays on record, and the stock returns to the shelf. Stock records and the activity log are never changed or deleted either. An order that is started but never paid is cancelled after a day, and its record stays.

The app will not delete a member who has bought something, placed an order, paid dues or had dues waived, left a suggestion, or had a note written about them. The member’s account stays, with its name and email address, which an organizer can still correct if they are wrong. An organizer can remove a member who has none of those records. When a member is removed, the activity log keeps the name and email address they had at the time.

A sign-in code is cleared as soon as it is used. Nothing in the app deletes records on a schedule, so all other information stays until someone removes it. We test new versions of the app on copies of the database, which start with the same records as the live one. Stripe, Resend and our other services keep their own records, which we cannot delete from here.

Your choices

You can ask what the app holds about you, ask us to correct a mistake, or ask to be removed. Ask any organizer, or write to us at the address below. If you are signed in, you can also press the ? in the corner of the shop, or Tell the organizers on You, and your message goes to the organizers by email.

The site does not offer a download of your records. Instead, an organizer looks them up and sends them to you. Removal is limited as described under “How long we keep it”.

Children

The site is not meant for children under 13, and we do not knowingly collect information about them.

Changes to this policy

When we change how the site handles information, we update this policy and the effective date at the top of this page.

Contact us

For questions about this policy or your information, email hello@greensnbeans.org. Our Contact page lists the other ways to reach the co-op.